[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Pkg sponsorship needed with LTS upload: curl/7.64.0-4+deb10u8



(Please CC me; I was unable to subscribe to debian-lts list due to lists.d.o
infra errors.)

Dear all,

I am looking for help in fixing https://bugs.debian.org/926148 in Debian 10
(Buster). After knowing that Debian LTS is still making updates to Debian
Buster till 2024-06, I would like to get some help from the LTS team in order
to get this fix into buster repository.

The changelog entry would be like this:

 curl (7.64.0-4+deb10u8) buster-security; urgency=medium
 .
   * Non-maintainer upload by the LTS team.
   * debian/patches/multi-remove-verbose-Expire-in-messages.patch:
     Remove excessively verbose "Expire in" messages in "curl -v" outputs.
     (Closes: #926148)

Full diff is provided in the attachment.

The fix to this bug is present in Debian Unstable/Testing/Stable/Oldstable
already.

Looking at https://lts-team.pages.debian.net/wiki/Development.html , it seems
that only CVE-related bugs or major bugs are actively handled. Now I am
wondering (1) if the current non-CVE bugfix would qualify for a separate
package upload in Debian Buster via LTS Team, and (2) if anyone would review
the changes attached and have it uploaded into the archive.

If this bugfix is fixed and uploaded within 7 days, I am willing to pay a one-
time USD 100 to the personal account, or (at your preference) a 1-year USD 300
(or equivalent)-level subscription to the affiliated LTS/ELTS-related company
for the person's bugfix work.

Thanks and waiting for your reply,
Boyuan Yang
From 20fe642681e7d9ce19ff11e36faceb7551760139 Mon Sep 17 00:00:00 2001
From: Boyuan Yang <byang@debian.org>
Date: Sun, 10 Dec 2023 10:35:31 -0500
Subject: [PATCH] Handle bug 926148

---
 debian/changelog                              |  9 ++++++
 ...ti-remove-verbose-Expire-in-messages.patch | 29 +++++++++++++++++++
 debian/patches/series                         |  1 +
 3 files changed, 39 insertions(+)
 create mode 100644 debian/patches/multi-remove-verbose-Expire-in-messages.patch

diff --git a/debian/changelog b/debian/changelog
index 1b7df04..bdd8ac6 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+curl (7.64.0-4+deb10u8) buster-security; urgency=medium
+
+  * Non-maintainer upload by the LTS team.
+  * debian/patches/multi-remove-verbose-Expire-in-messages.patch:
+    Remove excessively verbose "Expire in" messages in "curl -v" outputs.
+    (Closes: #926148)
+
+ -- Boyuan Yang <byang@debian.org>  Sun, 10 Dec 2023 10:35:47 -0500
+
 curl (7.64.0-4+deb10u7) buster-security; urgency=medium
 
   * Non-maintainer upload by the LTS team.
diff --git a/debian/patches/multi-remove-verbose-Expire-in-messages.patch b/debian/patches/multi-remove-verbose-Expire-in-messages.patch
new file mode 100644
index 0000000..5cd809c
--- /dev/null
+++ b/debian/patches/multi-remove-verbose-Expire-in-messages.patch
@@ -0,0 +1,29 @@
+From: Daniel Stenberg <daniel_at_haxx.se>
+Date: Mon, 11 Feb 2019 22:57:33 +0100
+Subject: multi: remove verbose "Expire in" ... messages
+
+Forwarded: not-needed
+Last-Update: 2019-02-12
+Bug: https://curl.se/mail/archive-2019-02/0013.html
+Bug-Debian: https://bugs.debian.org/930354
+Reviewed-by: Boyuan Yang <byang@debian.org>
+Origin: vendor, https://github.com/curl/curl/pull/3558
+Applied-Upstream: https://github.com/curl/curl/commit/aabc7ae5ecf70973add429b5acbc86d6a57e4da5
+---
+ lib/multi.c | 3 ---
+ 1 file changed, 3 deletions(-)
+
+diff --git a/lib/multi.c b/lib/multi.c
+index 1c25ed3..135ca64 100644
+--- a/lib/multi.c
++++ b/lib/multi.c
+@@ -3029,9 +3029,6 @@ void Curl_expire(struct Curl_easy *data, time_t milli, expire_id id)
+ 
+   DEBUGASSERT(id < EXPIRE_LAST);
+ 
+-  infof(data, "Expire in %ld ms for %x (transfer %p)\n",
+-        (long)milli, id, data);
+-
+   set = Curl_now();
+   set.tv_sec += milli/1000;
+   set.tv_usec += (unsigned int)(milli%1000)*1000;
diff --git a/debian/patches/series b/debian/patches/series
index 6d83b9d..82fb45b 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -44,6 +44,7 @@ CVE-2023-27536.patch
 CVE-2023-27538.patch
 CVE-2023-38546.patch
 CVE-2023-28321.patch
+multi-remove-verbose-Expire-in-messages.patch
 
 # Always add CVE patches before these two patches
 90_gnutls.patch
-- 
2.43.0

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: